CVE-2021-4210: Lenovo a540-24icb Firmware

Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days.

A potential vulnerability in the SMI callback function used in the NVME driver in some Lenovo Desktop, ThinkStation, and ThinkEdge models may allow an attacker with local access and elevated privileges to execute arbitrary code.

Affected products

  • Lenovo a540-24icb Firmware: affected versions not specified
  • Lenovo a540-27icb Firmware: affected versions not specified
  • Lenovo Ideacentre 5-14imb05 Firmware: affected versions not specified
  • Lenovo Ideacentre Aio 3-22ada6 Firmware: affected versions not specified
  • Lenovo Ideacentre Aio 3-22iil5 Firmware: affected versions not specified
  • Lenovo Ideacentre Aio 3-22itl6 Firmware: affected versions not specified
  • Lenovo Ideacentre Aio 3-24ada6 Firmware: affected versions not specified
  • Lenovo Ideacentre Aio 3-24iil5 Firmware: affected versions not specified
  • Lenovo Ideacentre Aio 3-24itl6 Firmware: affected versions not specified
  • Lenovo Ideacentre Aio 3-27itl6 Firmware: affected versions not specified
  • Lenovo Ideacentre c5-14imb05 Firmware: affected versions not specified
  • Lenovo Ideacentre g5-14imb05 Firmware: affected versions not specified
  • Lenovo Stadia Ggp-120 Firmware: affected versions not specified
  • Lenovo Thinkcentre m700 Firmware: affected versions not specified
  • Lenovo Thinkcentre m700 Tiny Firmware: affected versions not specified
  • Lenovo Thinkcentre m70a Firmware: affected versions not specified
  • Lenovo Thinkcentre m75n Firmware: affected versions not specified
  • Lenovo Thinkcentre m800 Firmware: affected versions not specified
  • Lenovo Thinkcentre m810z Firmware: affected versions not specified
  • Lenovo Thinkcentre m820z Firmware: affected versions not specified
  • Lenovo Thinkcentre m900 Firmware: affected versions not specified
  • Lenovo Thinkcentre m900x Firmware: affected versions not specified
  • Lenovo Thinkcentre m90a GEN2 Firmware: affected versions not specified
  • Lenovo Thinkcentre m910z Firmware: affected versions not specified
  • Lenovo Thinkcentre x1 Firmware: affected versions not specified
  • and 7 more

Published 2022-04-22. Last modified 2026-06-17.